Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

Axios affected by Denial of Service via __proto__ Key in mergeConfig

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking

AIOHTTP Vulnerable to Deserialization of Untrusted Data

attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()